Privacy Policy
​
1. Introduction
33 Stitches ("we," "our," or "us") is committed to protecting the privacy and security of the personal and protected health information (PHI) that we collect, process, and store. As a company that operates in a manner compliant with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), we understand the importance of maintaining the confidentiality, integrity, and availability of sensitive data.
This Privacy Policy outlines how we collect, use, disclose, and protect information, including PHI, and your rights related to that information.
2. Scope of This Policy
This Privacy Policy applies to all information collected by 33 Stitches in the course of our business operations, including but not limited to:
-
Healthcare-related services and platforms
-
Communications with healthcare providers and patients
-
Data collected from business associates
-
Information processed through our websites and applications
This policy does not apply to third-party websites or services that may be linked through our platforms. We are not responsible for the privacy practices of those third parties.
3. Information We Collect
We may collect the following types of information:
Personal Information
-
Name
-
Contact details (address, email, phone number)
-
Date of birth
-
Identification numbers
Protected Health Information (PHI)
-
Medical records
-
Diagnosis and treatment information
-
Insurance and billing information
-
Provider and facility data
Technical and Usage Data
-
IP address
-
Device identifiers
-
Browser type
-
Usage and interaction data
4. How We Use Your Information
We use the information we collect to:
-
Provide, maintain, and improve our services
-
Facilitate communication between patients and healthcare providers
-
Ensure compliance with applicable laws and regulations, including HIPAA
-
Perform internal audits, quality control, and data analysis
-
Process payments and insurance claims
-
Respond to legal requests and prevent fraud or abuse
5. HIPAA Compliance
33 Stitches complies with all applicable HIPAA regulations, including the Privacy, Security, and Breach Notification Rules. We implement:
-
Administrative safeguards (e.g., staff training, access controls)
-
Physical safeguards (e.g., secure facilities, device protections)
-
Technical safeguards (e.g., encryption, secure transmission protocols)
We also enter into Business Associate Agreements (BAAs) as required by HIPAA when working with partners or vendors who may have access to PHI.
6. Data Sharing and Disclosure
We do not sell or rent your information. We may disclose your information in the following circumstances:
-
With your explicit authorization
-
To healthcare providers and payers involved in your care
-
To business associates under HIPAA-compliant agreements
-
As required by law, such as in response to a court order or legal process
-
To protect against or prevent fraud or other legal violations
-
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties
7. Your Rights
As a data subject, you have the following rights under HIPAA and other applicable laws:
-
Right to Access: Request a copy of your PHI
-
Right to Amend: Request corrections to your PHI
-
Right to an Accounting of Disclosures
-
Right to Restrict Use or Disclosure
-
Right to Confidential Communications
-
Right to File a Complaint
To exercise these rights, contact us using the details provided below.
8. Data Security
We employ industry-standard security measures to safeguard the confidentiality, integrity, and availability of all data we handle, including:
-
End-to-end encryption
-
Role-based access controls
-
Regular risk assessments
-
Incident response protocols
9. Retention and Disposal
We retain PHI and personal data for as long as necessary to fulfill the purposes for which it was collected and as required by law. When no longer needed, data is securely disposed of in accordance with HIPAA guidelines.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we do, we will revise the "Last Updated" date. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or your information, please contact us:
33 Stitches LLC
30 N Dean St
Englewood NJ 07631
​
You may also file a complaint with the U.S. Department of Health and Human Services (HHS) if you believe your privacy rights have been violated.